This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
File:                     1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json)
Hash identifier:          j19a/9rGPMkEAasKgxJJ/IduYFppgmmNI+AzH4nk0cM=
Subject key identifier:   B9:F8:EF:0F:75:1F:3D:72:11:7A:3A:BF:37:25:BC:B0:82:C9:A0:84
Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99
Certificate issuer:       /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
Manifest number:          01C0
Signing time:             Fri 23 Jan 2026 02:13:00 +0000
Manifest this update:     Fri 23 Jan 2026 02:13:00 +0000
Manifest next update:     Fri 30 Jan 2026 02:13:00 +0000
Files and hashes:         1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: 8nDRQS5Qir+eHnHyoeAPYJMW0VRJTeb5zJiUQOrCEic=)
                          2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: CcqSmSm4lCpqTwyfkGRpqe+7Fg7ZeSpS7rkbNOQEqeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl
                          rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA9E, serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
        Validity
            Not Before: Jan 23 02:13:00 2026 GMT
            Not After : Jan 30 02:13:00 2026 GMT
        Subject: CN=6972d92c-5279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:b1:9d:32:da:50:81:a4:d0:52:44:68:c5:
                    0a:c8:52:12:26:53:50:5d:10:89:43:11:12:c0:81:
                    d2:c9:0c:b3:27:bc:40:0c:4b:c8:3d:bd:80:ee:26:
                    31:ab:c0:8b:9a:34:6d:4c:2e:0d:0e:08:5f:5a:f4:
                    6e:76:86:d7:ed:aa:18:de:66:2e:79:00:8a:72:a1:
                    96:a7:d3:48:f7:64:8e:90:b5:77:a4:49:20:20:39:
                    9c:29:15:e6:24:a4:bd:70:55:55:a0:85:48:e7:f7:
                    ff:d1:94:cb:3b:e9:03:c0:12:58:d7:f1:d1:0a:87:
                    db:05:89:da:19:bd:01:81:d7:33:78:af:8b:8e:fa:
                    e7:b7:4f:cb:c5:7e:d1:6b:bd:ec:d4:93:32:cd:35:
                    1b:c6:44:89:41:85:ad:70:26:0e:d4:ed:1a:a5:fb:
                    2c:d6:50:ae:80:5c:4f:5f:b9:ba:2b:59:b5:73:b0:
                    2a:19:68:77:93:f4:75:77:b5:75:9d:ee:ca:fe:2a:
                    77:a4:26:a8:6c:97:05:5b:46:fd:78:3a:46:63:61:
                    9d:c9:56:68:9e:e3:f5:36:cd:8e:c4:f2:34:34:a4:
                    52:a1:38:64:e6:aa:e7:35:2b:70:1b:01:43:82:33:
                    07:17:40:d8:80:a0:38:3e:05:ec:0d:94:46:b9:4d:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:EF:0F:75:1F:3D:72:11:7A:3A:BF:37:25:BC:B0:82:C9:A0:84
            X509v3 Authority Key Identifier:
                keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:01:27:77:3a:f2:92:4e:7e:2b:b6:15:bd:a3:60:c9:3c:
         15:de:0b:3a:43:2b:a1:95:02:95:dd:b2:c4:b7:d6:ab:cd:a6:
         e8:3e:7c:39:1e:93:75:42:3e:9c:b9:09:6a:56:5e:df:ef:fa:
         a4:e9:01:bd:e8:20:78:75:d5:93:4a:55:f0:dd:30:a7:5e:2e:
         90:ec:fe:88:16:6c:e0:ea:bf:8a:64:76:b4:aa:41:75:ca:ce:
         54:b4:c8:4c:1d:12:29:83:17:dc:66:3d:0a:58:71:28:1d:ae:
         2d:49:a6:33:66:0f:12:cd:64:a9:e4:7d:9a:04:d1:67:cc:c2:
         48:39:ea:88:a9:83:67:cb:1d:c5:4e:5b:53:0f:3a:34:cf:12:
         a8:9b:f0:80:81:93:84:d2:ae:e5:93:ae:bb:17:b8:04:4b:97:
         8f:56:ce:35:8b:9a:82:d5:93:b6:e0:ff:2a:1d:ab:50:6e:26:
         72:de:b6:46:09:96:0a:fc:2d:48:0e:07:be:38:2a:5d:b8:38:
         b5:0b:22:bd:4d:24:c1:17:86:ed:bd:65:14:cd:a3:49:a4:90:
         da:b6:ad:1c:b8:46:8b:30:16:67:78:9c:57:24:79:2a:f5:e6:
         85:99:ac:6c:02:94:a3:45:04:60:14:c6:f1:5a:c8:84:19:e0:
         bd:94:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:30 2026 by rpki-client